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A dynamical quantum model assigns an eigenstate to a specified observable even when no mea- 
surement is made, and gives a stochastic evolution rule for that eigenstate. Such a model yields 
a distribution over classical histories of a quantum state. We study what can be computed by 
sampling from that distribution, i.e., by examining an observer's entire history. We show that, rel- 
ative to an oracle, one can solve problems in polynomial time that are intractable even for quantum 
computers; and can search an iV-element list in order iV 1 ' 3 steps (though not fewer). 

Given a system with known Hamiltonian and initial state, nonrelativistic quantum 
theory specifies the probability of measuring an observable in a given eigenstate at 
each time t > 0. It does not, however, yield multiple-time or transition probabilities 
£>V jj], H, H, |J: that is, what is the probability that an observable assumes value \1jj2) at 

t2, given that it assumed at an earlier time t\ (though was not measured at t\)1 
This question, we argue, is not easily ignored in scenarios wherein a Hamiltonian H 
is coherently applied to a system that contains an observer. Granting the possibility 
of macroscopic coherence, one might try to avoid the question as follows. In a typical 
experiment, one keeps records of observations. If the records were stored where 
H could not affect them, then they would inhibit the interference that H would 
otherwise produce. If, on the other hand, records were not kept, or were themselves 
subject to H, then at time ti one would lose the right to ask which eigenstate was 
observed at t\ , since at £2 this event has no meaning outside of records available at t% ■ 
I/"") ' The difficulty with this account is that it is unclear what a 'prediction' could mean 

without some notion of multiple-time probabilities independent of records. Indeed, 
the 'outcome of an experiment,' the 'output of a computation,' and the 'utility of a 
decision' all seem to presuppose an observer or collection of observers persisting over 
time. (See p. 126] and || p. 135-6] for related criticisms.) 

The question of multiple-time probabilities arises in any interpretation of quantum 
theory that treats observers as physical systems that can be placed in superposition. 
This includes many-worlds interpretations, modal interpretations, and the Bohm in- 
terpretation, though not 'explicit-collapse' interpretations. The Bohm interpretation 
asserts an answer to our question, but applies only to a particular setting: it assumes 
not only the form of the guiding equation, but also a state space (the positions and 
momenta of particles in Euclidean space) and a preferred observable (position). We 
take a more abstract perspective, which allows arbitrary finite state spaces, and does 
. not commit to any one observable or dynamics. 

In this Letter we initiate the study of multiple-time probabilities from the stand- 
point of quantum computing. Our main result is that an observer, if given access to 
past eigenstates, could solve problems efficiently that are believed to be intractable 
even for quantum computers. Although such access is not permitted by quantum 
theory, an observer might wish to calculate a probable history of eigenstates, given 
a dynamics, initial state, and Hamiltonian. Under weak assumptions, we show that 
this task is infeasible even for moderately-sized systems, meaning those for which a 
quantum computer could efficiently sample eigenstates at single times. 

We define a dynamical quantum model to be a function which, given a pure or mixed 
state p in N dimensions, a unitary U acting on p, and a von Neumann observable 
V with N possible outcomes, specifies (for all a probability Pij that V assumes 
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value i before U is applied to p (time ti), and j after U is applied (time t-i). The Pij's 
must marginalize to the single-time probabilities implied by quantum theory: that 
is, the diagonal entries of VpV" 1 at t 1} and of VUpU~ 1 V~ 1 at t 2 - It is immediate 
that there exists a dynamical model (the simplest one, which we call the product 
dynamics or VT>, takes the distribution over V at t 2 to be independent of that at 
ti), and that there are infinitely many nonequivalent models. 

Let a quantum computer have initial state |0)® n , and suppose we apply a sequence 
U = (Ui, . . . , Ut) of unitary operations, each of which can be implemented in BQP, 
or bounded-error quantum polynomial time. (See || for background on BQP and 
other computational complexity classes.) Let V be the observable corresponding to 
the standard (computational) basis. We consider a history H = (vi, . . . , vt) of V, 
which chooses a particular eigenstate of V at each time step: namely, Vk immediately 
after Uk is applied to the state Ujk-i ■ ■ ■ U\ |0)® n . Then any dynamics V yields a 
distribution £1 (U, T>) over histories. Observe that Q, is a Markov distribution; that 
is, each Vk is independent of the other vi's conditioned on Vk-i and Sampling 
a history from Q is at least as difficult as simulating a polynomial-time quantum 
computation, for sampling from the marginal distribution over any Vk is equivalent 
to simulating a standard-basis measurement of Uk - ■ ■ U\ |0)®™. But could sampling 
a history enable one to solve problems that are intractable even for quantum com- 
puters? 

To separate this question from any particular dynamics, we introduce a complex- 
ity class DQP, or dynamical quantum polynomial-time. Informally, DQP consists of 
those problems solvable in polynomial time by sampling histories under any dynam- 
ical model, so long as it satisfies locality and symmetry conditions to be discussed. 
We then show that SZK C DQP, where SZK, statistical zero knowledge, is a classi- 
cal complexity class containing several problems that have resisted efficient quantum 
algorithms — including graph isomorphism, nonabelian hidden subgroup, and approx- 
imate shortest lattice vector. Already this suggests that BQP ^ DQP, i.e., that our 
dynamical quantum computing model is strictly more powerful than the usual quan- 
tum computing model. However, we give stronger evidence, of the kind typically 
sought in computer science. We recently obtained |?j a lower bound of order n 1 / 5 on 
the number of oracle queries needed by a quantum computer to solve the 'collision 
problem,' that of deciding whether a function / : {1, . . . , n} — > Z is one-to-one or 
two-to-one. (Shi S has improved this bound to order n 1 / 3 , which is optimal.) But 
the collision problem, which abstractly models SZK, can be solved in a constant num- 
ber of queries using a dynamical model. Formalizing this intuition, we show in p] 
that there exists an oracle A for which SZK A BQP A , and therefore BQP A ^ DQP 

As is usual in quantum computing, we assume a Hilbert space H.n of finite di- 
mension N, and discretize time into steps of equal length r. Other authors JjJ have 
considered dynamics in a continuous-time setting. It might be thought that our re- 
striction to discrete time introduces a drawback, that the dynamics depend not just 
on the initial state and Hamiltonian but also on the choice of r. For example, two 
Hadamard gates applied in succession seem to correspond to two random transitions 
when considered separately, but to a permutation (namely the identity permutation) 
when considered jointly. However, an analogous problem occurs in the continuous- 
time setting. There, letting t — > be the length of a time interval being considered, 
there is still a free parameter dr/dt on which the dynamics depend. 

For simplicity, we consider the dynamics of only a single time-independent observ- 
able V, and assume those dynamics at each time t to depend only on the state and 
Hamiltonian at t (it is easy to show that they cannot depend on the Hamiltonian 
only). By the Kochen-Specker theorem we cannot assign values noncontextually to 
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every observable, let alone specify their transition probabilities. We could consider a 
subset S of observables that contains no Kochen-Specker contradiction, but even then 
we could not apply a dynamical model independently to each observable in S without 
in general violating noncontextuality. The case of time-dependent observables was 
considered in and elsewhere. 

Formally, a dynamical quantum model is fully characterized by a family of func- 
tions, {D N } N>1 :H N xU (N) -> S (N), which map a pure or mixed state p E Hn, 
a unitary U E U (N), and an orthonormal basis V = V\, . . . , Vn E U (N) onto a 
singly stochastic matrix S E S (N). We sometimes suppress the dependence on N. 
Let (M)^ denote the entry in the i th column and j th row of M. Then (S)^ is the 
probability that the observable corresponding to V takes value Vj after U is applied 
to p, conditioned on V taking value Vi before U is applied. Any dynamics must 
satisfy the conditions of unitary invariance — for all unitary changes of basis W , 

v (p, u,v) = v (w P w-\wuw~\ wvw- 1 ) , 

and marginalization — for all j E {1, ... , iV}, 

(S)«(p)« = (^cr 1 ) ii . 

Because of invariance, we will henceforth take V = I and consider T> as a function 
of p and U only. 

Three additional conditions we desire are symmetry, robustness, and locality. We 
say that T> is symmetric if it is invariant under relabeling of basis states: more 
precisely, for all permutation matrices P and Q, 

V (PpP-\ QUP- 1 ) = QV {p, U) P- 1 . 

Also, T> is robust if it is insensitive to sufficiently small errors (which, in particular, 
implies continuity): for all polynomials p, there exists a polynomial q such that for 
all N, p € H N , and U e U (N), 

\\V N (p,U)-V N (p*,U*)\\ < l/p(N) 

where ||M|| = max y (M) tj , whenever \\p - p*\\ < 1/q (N) and \\U - U*\\ < 1/q (N). 

Robustness will not be needed for our results, but is often demanded of a computa- 
tional model. 

In the interest of generality, we did not assume TIn to have a particular tensor 
product structure. Thus, we define locality by partitioning the basis states into 
'blocks,' between which U can never produce interference. Call L C {1, . . . ,N} a 
block if {U) ik — for all i E L and k (fc L, and a minimal block if no L* C L is a block. 
Note that the minimal blocks are disjoint. Then T> is local if it acts separately on 
each minimal block: more formally, 

{S) lJ ^V w (p L ,U L ) 

for all minimal blocks L and i,j E L, where Ul is the L x L submatrix of U, and pl 
is the L x L submatrix of p normalized to have trace 1. We do not claim that the 
locality condition implies relativistic causality. For example, if pab is a bipartite 
state and XJ a and Ub act only on A and B respectively, then locality does not imply 
commutativity in the sense that 



V (UaPabUa 1 , U b ) V (p AB , U A ) 
= V (UbPabU b \ U a ) V (pab,U b ) ■ 
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We raise as an open question whether there exists a dynamical model satisfying 
robustness, locality, and commutativity. See || for a more detailed analysis of 
causality in dynamical models. 

The product dynamics VT> is unsatisfactory because it does not satisfy locality. 
Dicks proposed partitioning the basis vectors into minimal blocks and applying 
VT> separately to each. The resulting Dieks dynamics, T>T>, satisfies locality and 
commutativity, but not robustness, since the minimal blocks are sensitive to arbi- 
trarily small changes to U. 

We introduce a dynamical model, the Schrodinger dynamics or ST>, that satisfies 
robustness and locality. Commutativity is satisfied for unentangled states but not for 
entangled ones. Constructing ST> involves solving a system of nonlinear equations, 
which were first studied in the continuous case by Schrodinger |)J. The existence 
and uniqueness of a solution was shown under broad conditions by Nagasawa fl(i|l . 
In the discrete case, where the problem is known as (r, c) -scaling, efficient algorithms 
are known for finding the solution (Jll[ and references therein). 

The idea is repeatedly to tweak U to bring it closer to a stochastic matrix that 
satisfies the marginalization condition. The first step is to replace each entry of U 

2 

by its squared magnitude, obtaining EA°) such that (U^) = (t/)ij ■ We wish to 
make the i th column of the matrix sum to (p) ii: and the j th row sum to (U pU^ 1 ) 

for all i,j G {1, . . . , N}. The stochastic matrix S mapping diag (p) to diag (UpU^ 1 ) 
is then readily obtained by normalizing each column to sum to 1. Here 'normalizing' 
means multiplying by a scalar. 

The algorithm is iterative. For each t > we obtain [/( 2t+1 ) by normalizing 
each column i of to sum to (p) u ; likewise we obtain {/( 2t + 2 ) by normalizing 

each row j of U {2t+1) to sum to (UpU^ 1 )^. We claim that (1) the limit U {co) 
of this iteration exists, and (2) the resulting diagonal matrices A and B such that 
are unique up to scalar multiples. It is known Jll| that both claims 
are implied by the following 'flow condition': there exists a nonnegative matrix M 
such that £ fc (M) lk = (p) u for all i, £ fc (M) k . = (UpU- 1 )^ for all j, and (M)^ - 
whenever (U)^ — 0. Surprisingly, the flow condition always holds if U is unitary 
(we omit the proof). 

Clearly ST> satisfies locality, since U^°°^ — whenever [Ty = 0. It is shown in 
jnj that for any polynomial p, the iterative algorithm converges to within l/p(N) 
precision in polynomial time. Using this one can show that ST> satisfies robustness 
also. 

We now define the complexity class DQP. For a dynamics T>, let O (V) be an 
oracle that takes as input a sequence hi = {U±, . . . , Ut) of quantum circuits, and 
returns as output a sample (v\, . . . ,«t) from the history distribution fl(U,T>) as 
defined previously. Then let DQP (V) = BQP° {V) (i.e. BQP with oracle access to 
O (£>)), and let DQP be the set of languages that are in DQP (T>) for all T> satisfying 
symmetry and locality. Other reasonable classes could be defined — for example, we 
could allow only classical queries to O (T>) , or only one query instead of multiple 
ones — but such distinctions are a subject for complexity theory rather than physics. 
The best upper bound we know of is DQP C P# p , from the Dieks dynamics. 

Let us see why SZK C DQP. Sahai and Vadhan jl2| showed that, to simulate 
SZK, it suffices to solve the following statistical difference (SD) problem. Suppose 
deterministic classical polynomial-time algorithm Pi (for i £ {0, 1}) returns output 
Yi (X) 6 {0, l} n+1 distributed according to Aj = (py.i), when given an input X 
chosen uniformly from {0, 1}™. Then decide whether Aq and Ai are 'e-close' or 
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'e-far' — that is, whether 

|| A - Ai|| = J2y \py,o-pya\ /2 

is less than e or greater than 1 — e for some e > 0, given that one of these is the case. 
As an example, let Go and G\ be graphs, and let Aj be the uniform distribution 
over all permutations of G^. Then A and A x are 0-close (that is, identical) if G 
and Gi are isomorphic, and are 0-far (disjoint) otherwise. It follows that testing 
isomorphism of graphs is reducible to SD, and hence is in SZK. 

In the special case where Po and Pi are one-to-one, the DQP algorithm consists 
simply of three quantum circuits, U\,U2, and C/ 3 . First U\ transforms 10)®" to 
(|$ ) + |$i))/V2, where 

l^)-2-"/ 2 E xe{0 , ir K)|A-)|r,(x)) 

for a control bit |z) (henceforth \Yi (X)) is abbreviated \Y)). Then U 2 applies a 
bitwise Fourier transform to \i) \X) (that is, a Hadamard gate on each bit), and U3 
does the same, returning the state to U\ |0)®" . Intuitively, this is analogous to 
measuring \Y), and then making multiple 'non-collapsing' measurements of \i) to see 
whether it contains one value or a superposition of two values. In the former case we 
conclude that Ao and Ai are e-far; in the latter that they are e-close. The technical 
part is to show that this algorithm works under any symmetric local model. 

Let Vk = \ik) |-Xfc) \Y) be the value of V immediately after Uk is applied. First 
suppose Ao and Ai are e-far. Then because Po and Pi are one-to-one, i>i's 'counter- 
part' p«i> \Y) has zero amplitude in U\ \0}® n with probability at least 1 — e, 

where '"" denotes negation. In that case, the state of |z) conditioned on \Y) is 
Since U2 and U3 do not act on \Y) and U3U2 is the identity, it follows by locality 
that i\ = is. 

Second, suppose A and Ai are e-close. Define binary vectors a = ii o X\, b = 
^iioX'l \ and c = i 2 oX 2 in Z^ -1 " 1 , where 'o' denotes concatenation. Then \a) \Y) and 
\b) \Y) have equal amplitude with probability at least 1 — e. Recall that the Fourier 
transform F maps \a) onto 2~™/ 2 ^ c (— l) a c |c) and similarly for \b). Thus, the only 
|c) that have nonzero amplitude in U2U1 |0) n are those for which a-c = b- c (mod 2). 
We wish to show that F is symmetric under some permutation of eigenstates that 
interchanges a with b while leaving c fixed. Suppose we had an invertible matrix M 
over such that Ma = b, Mb — a, and M T c = c. Then define two permutations 
a, t over binary vectors by a (a) = Ma and r (c) = (M T ) 1 c, so that 

a (a) ■ t (c) = a ■ c (mod 2) 

for all a, c. Since the (a, c) entry of F is 2~(™ +1 )/ 2 (— l) a °, this implies that F 
is symmetric under application of a to its input eigenstates and r _1 to its output 
eigenstates. We argue that such an M exists so long as a and b are nonzero (which 
they almost certainly are). For let w and z be unit vectors, and let L be an invertible 
matrix over Z^ +1 such that Lw = a and Lz = b. Let Q be the permutation 
matrix that interchanges w and z while leaving all other unit vectors fixed. Then 
set M = LQL^ 1 . Clearly Ma — b and Mb = a. Also, a ■ c — b ■ c implies 
w T L T c — z T L T c, so the w and z entries of L T c are equal, and thus Q T (L T c) — L T c, 
implying M T c = c. 

By the symmetry condition, it follows that (5) ca = {S) cb — 1/2, where (5) ca is 
the probability that v 3 — \a)\Y) and {S) cb that V3 = \b) \Y), both conditioned on 
V2 = |c) \Y). Thus, there is a 1/2 probability that ii ^ 13. 
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For general Pq and Pi , we can reduce to the one-to-one case by appending a register 
| ft [i o A)) to on which {/ 2 and U3 do not act. Here ft is chosen uniformly at 
random among all 'hash functions' mapping Z 2 +1 to {1,... , K}, for some range 
size K. Let n = \Pq 1 (Y)\ be ^ ne number of X such that Pq(X) — Y, and 
similarly define n\. Then assuming that Ao and Ai are e-close, \no/n\ — 1| < 4e with 
probability at least 3/4 over the choice of Y, by Markov's inequality. After applying 
U\, we apply U% and U3 in succession n times, initially with K = 1 and each time 
thereafter setting AT to twice its previous value and recomputing ft. Define a = iioAi 
as before. Then we want there to exist a unique counterpart b =^i\ o A-] such that 
ft (a) = ft (6), but no a* = ii o Aj* such that ft (a) = ft (a*). Letting a = m/K, this 
joint event (call it E) occurs with probability 

(1 - l/K) no+ni m/K « ae- 2 "( 1±2£ ) 

over the choice of ft. This is bounded away from when a 6 [1,2]. When £7 does 
occur, the analysis for the one-to-one case applies, and establishes that v\ and its 
counterpart are both observed with 1/2 probability. 

The algorithm for searching an unordered list of A~ items in order N 1 / 3 queries is 
conceptually similar. Assume for simplicity that there is a unique marked state \j) 
that we are trying to find. The first step is to apply AT 1 / 3 iterations of Grover's search 
algorithm |p|, thereby boosting the probability of observing \ j) to order A" 1 / 3 . The 
next step is to 'juggle' the observable V as uniformly as possible, so that after order 
A' 1 / 3 steps, with high probability V has visited \j) at least once. Then j can be 
found by inspecting the classical history (vi, . . . , Wy). Again the technical part is to 
show that this can be done in any symmetric local model, and again the primary tools 
are a hash function (to reduce the problem of juggling V among many eigenstates 
to that of juggling it between two), and the bitwise Fourier transform (to juggle). 
Details are omitted due to space limitations. 

The A^ 1 / 3 bound is easily seen to be optimal under any dynamical model. Bennett 
et al. @ showed that, if tfW (A) is an algorithm's state after t queries to an N- 
item list A, then by changing one item of X we can obtain a list X* such that 
||^(t) (X) - (A*) || ^ i 2 /A in trace distance. It follows by the union bound 
that, if T <C N 1 / 3 queries are made, then the probability that the X — > X* change 
affects the history (v\,... ,Vt) is of order Y^t^i^/N *C 1. Hence, there exists 
an oracle A relative to which NP-complete problems are not efficiently solvable in 
dynamical models; that is, NP A DQP A (V) for any T>. This result supports the 
intuition that dynamical models are somehow more 'physically reasonable' than (for 
example) nonlinear quantum models, which would enable NP-complete and even ^P- 
complete problems to be solved in polynomial time []l5f . Although our model grants 
an observer access to her entire history within a quantum system, it does not allow 
her to record histories in superposition, or otherwise to influence the system in a way 
contrary to quantum theory. 

I thank Ronald de Wolf, Umesh Vazirani, John Preskill, Guido Bacciagaluppi, 
Avi Wigderson, and Dennis Dieks for helpful discussions. Supported by an NSF 
Graduate Fellowship and by DARPA grant F30602-01-2-0524. 
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